Privacy Policy — How hrybaji Handles Your Personal Data
Your privacy is fundamental to how hrybaji operates. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own information as a player on our platform.
End-to-End Encryption
All data transmitted between your device and the hrybaji servers is protected using industry-standard SSL/TLS encryption. Your personal details and financial information are never transmitted in plain text.
Your Data, Your Control
hrybaji gives you full visibility and control over the personal data we hold. You can request access, correction, or deletion of your data at any time by contacting our support team at [email protected].
We Never Sell Your Data
hrybaji does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used solely to deliver and improve our gaming services and to meet our legal obligations.
KYC & Compliance
We collect identity and payment verification data as part of our Know Your Customer (KYC) process. This information is handled with strict confidentiality and is used only for verification, fraud prevention, and anti-money-laundering compliance.
Transparent Cookie Use
hrybaji uses cookies and similar tracking technologies solely to improve your browsing experience and to analyse platform performance. We do not use cookies to serve third-party advertising. You can manage your cookie preferences at any time.
Responsible Gaming Data
Data collected through our responsible gaming tools — including self-exclusion requests, deposit limits, and session reminders — is treated with the highest level of confidentiality and is never used for marketing purposes.
Data We Collect
Scope: This Privacy Policy applies to all personal data collected by hrybaji through the hrybaji.net website, mobile interface, customer support channels, and any associated services. By creating an account and using the hrybaji platform, you acknowledge that you have read and understood how your data is processed as described herein.
hrybaji collects personal data only to the extent necessary to deliver a secure, compliant, and high-quality gaming experience. The categories of personal data we collect are set out below.
1.1 Registration & Account Data
When you register for an hrybaji account, we collect the following information:
- Full legal name
- Date of birth (to verify that you meet the 18+ age requirement)
- Email address
- Mobile phone number (including bKash or Nagad registered number)
- Residential address (city, district, and division — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
- Username and encrypted password
- Preferred currency (Bangladeshi Taka ৳)
1.2 Identity Verification (KYC) Data
To comply with our anti-money-laundering (AML) obligations and to protect the security of all players, hrybaji may request the following documentation:
- Copy of a government-issued photo ID (National ID card, passport, or driving licence)
- Proof of current address (utility bill, bank statement, or official correspondence dated within the last three months)
- Proof of payment method ownership (e.g., screenshot of bKash, Nagad, Rocket, or Upay wallet confirming the registered mobile number)
- Source-of-funds declaration for high-volume accounts
1.3 Financial Transaction Data
When you make deposits or request withdrawals, hrybaji records the following:
- Transaction amounts in Bangladeshi Taka (৳)
- Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
- Transaction reference numbers and timestamps
- Account balance history and bonus credit records
1.4 Technical & Device Data
When you access the hrybaji platform, our systems automatically collect certain technical data including:
- IP address and approximate geolocation (country/city level)
- Device type, operating system, and browser version
- Session duration, login timestamps, and pages visited
- Referring URL and exit page
- Cookie identifiers and local storage data (see Section 4)
1.5 Gaming Activity Data
hrybaji records all gaming activity on the platform for operational, security, and responsible gaming purposes. This includes:
- Games played (slots, live casino, sports betting, Callbreak, cricket betting)
- Bet amounts, game outcomes, and win/loss records
- Bonus usage and wagering progress
- Responsible gaming settings (deposit limits, session reminders, self-exclusion history)
1.6 Communications Data
If you contact hrybaji's customer support or respond to our communications, we retain records of:
- Support ticket content and resolution history
- Email correspondence with [email protected]
- Live chat transcripts (where applicable)
- Feedback, complaints, and dispute records
| Data Category | Lawful Basis | Retention Period |
|---|---|---|
| Registration & Account Data | Contractual necessity | Duration of account + 5 years post-closure |
| KYC / Identity Verification Data | Legal obligation (AML compliance) | Minimum 5 years from verification date |
| Financial Transaction Data | Legal obligation / Contractual necessity | Minimum 5 years from transaction date |
| Technical & Device Data | Legitimate interests (security, fraud prevention) | 13 months rolling |
| Gaming Activity Data | Contractual necessity / Legitimate interests | Duration of account + 5 years post-closure |
| Communications Data | Legitimate interests / Legal obligation | 3 years from last interaction |
How We Use Your Data
hrybaji uses the personal data we collect for specific, documented purposes. We do not process your data in ways that are incompatible with the purposes listed below. The primary purposes for which we use your personal data are:
- Account Creation & Management: To register your account, verify your identity, maintain your player profile, and provide access to all hrybaji gaming products and services.
- Payment Processing: To process deposits and withdrawals through approved payment channels including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records in Bangladeshi Taka (৳).
- Security & Fraud Prevention: To detect and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
- Legal & Regulatory Compliance: To fulfil our obligations under applicable AML regulations, to respond to lawful requests from regulatory or law enforcement authorities, and to maintain required records.
- Responsible Gaming: To operate deposit limits, session reminders, cooling-off periods, and self-exclusion tools that support player wellbeing. Responsible gaming data is never used for marketing.
- Customer Support: To respond to your queries, resolve disputes, process complaints, and provide ongoing assistance via [email protected].
- Platform Improvement: To analyse usage patterns, identify technical issues, and improve the overall quality and performance of the hrybaji platform for all players in Bangladesh.
- Marketing Communications (with consent): To send you information about relevant promotions, seasonal offers (Eid, Pohela Boishakh, BPL season, ICC tournaments), and platform updates — only where you have provided explicit consent. You may opt out of marketing communications at any time.
Marketing Opt-Out: If you no longer wish to receive promotional emails or notifications from hrybaji, you may unsubscribe at any time by contacting [email protected] with the subject line "Marketing Opt-Out". Your opt-out will be processed within 10 business days. Opting out of marketing does not affect transactional or account-related communications.
Data Sharing & Third Parties
hrybaji does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data with third parties only in the limited circumstances described below, and always subject to appropriate data protection safeguards.
3.1 Payment Service Providers
To process your deposits and withdrawals, hrybaji shares the minimum necessary transaction data with our approved payment partners, including bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard). These providers process your data solely for the purpose of executing the specific transaction and are contractually prohibited from using your data for any other purpose.
3.2 Game Technology Providers
hrybaji's gaming catalogue is powered by third-party game studios and live-streaming platforms including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive anonymised session data (such as game round IDs and bet amounts) to facilitate game delivery and dispute resolution. They do not receive your personally identifiable information beyond what is required for game service delivery.
3.3 Identity Verification Services
To fulfil our KYC obligations, hrybaji may engage third-party identity verification service providers who process submitted documents on our behalf. These processors act under hrybaji's instruction and are bound by strict data processing agreements.
3.4 Legal & Regulatory Authorities
hrybaji may be required to disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only the minimum data required to satisfy the specific legal demand and will inform you of such disclosure where we are legally permitted to do so.
3.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of hrybaji's assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, we will notify affected players via the registered email address and ensure that the receiving entity is bound by data protection obligations no less protective than those described in this Privacy Policy.
No Cross-Border Transfers Without Safeguards: hrybaji primarily stores and processes player data within secure server infrastructure. Where data is transferred internationally (e.g., to game providers' servers), hrybaji ensures that appropriate contractual safeguards are in place to maintain the same level of data protection that applies to data processed within our primary infrastructure.
Data Retention & Storage
hrybaji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain accurate financial records, and to comply with applicable legal obligations. The retention periods applicable to each data category are summarised in the table in Section 1.
Upon the closure of your hrybaji account — whether voluntarily or due to a Terms breach — your personal data is not immediately deleted. We are required to retain your account records, transaction history, and KYC documentation for a minimum of five years following account closure in order to satisfy our AML record-keeping obligations and to be able to respond to any regulatory enquiries or legal disputes that may arise during that period.
After the applicable retention period has elapsed, hrybaji will securely delete or anonymise your personal data so that it can no longer be linked back to you. Where anonymisation is used rather than deletion, the resulting data may be retained indefinitely for aggregated statistical analysis.
Dormant Account Data
Where an account has been inactive for 12 consecutive months and is classified as dormant under our Terms & Conditions, the account data is retained under the same retention schedule as active accounts. hrybaji will make reasonable efforts to notify you before applying any dormancy administration charges.
Self-Exclusion Records
Records relating to a player's self-exclusion are retained for the full duration of the self-exclusion period plus a minimum of five years thereafter. This retention is maintained specifically to prevent a player from re-registering during an active exclusion period and to protect the welfare of vulnerable players.
Data Deletion Requests: You have the right to request the deletion of your personal data (see Section 7). However, please be aware that where we are legally required to retain data for AML, KYC, or financial record-keeping purposes, we may be unable to fulfil a deletion request in full until the applicable retention period has elapsed. We will always communicate clearly what data can be deleted immediately and what must be retained, and why.
Data Security Measures
hrybaji implements a layered approach to data security, combining technical controls, organisational policies, and access management practices to protect your personal information against unauthorised access, loss, alteration, or disclosure.
Technical Safeguards
- SSL/TLS Encryption: All data in transit between your device and hrybaji's servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when accessing hrybaji.net.
- Encrypted Data Storage: Sensitive data fields — including passwords, payment details, and identity document references — are stored in encrypted form at rest. Passwords are hashed using a one-way cryptographic algorithm and are never stored in plain text.
- Firewalls & Intrusion Detection: hrybaji's infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious access patterns and known attack signatures.
- Access Controls: Access to personal data within hrybaji's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role.
- Two-Factor Authentication (2FA): hrybaji recommends enabling 2FA on your account to add an additional layer of security against unauthorised access.
Organisational Measures
- All hrybaji staff who handle personal data are subject to confidentiality obligations and receive regular data protection training.
- Third-party processors are subject to due diligence assessment and are required to sign data processing agreements before handling any hrybaji player data.
- hrybaji conducts periodic internal reviews of its data security practices to identify and remediate potential vulnerabilities.
Data Breach Response
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, hrybaji will take the following steps:
- Investigate and contain the breach as rapidly as possible
- Notify affected players via their registered email address without undue delay
- Provide clear information about what data was affected, the likely consequences, and the measures being taken
- Notify relevant regulatory authorities as required by applicable law
To report a suspected security vulnerability on the hrybaji platform, please contact [email protected] immediately. hrybaji takes all security reports seriously and will acknowledge your report within 48 hours.
Your Privacy Rights
As an hrybaji player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Privacy Rights Request". hrybaji will respond to all valid requests within 30 days of receipt.
Right of Access
You have the right to request a copy of all personal data hrybaji holds about you, along with information about how it is used and with whom it is shared.
Right to Rectification
If any personal data hrybaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any overriding legal retention obligations.
Right to Restrict Processing
In certain circumstances, you may request that hrybaji restricts the processing of your personal data while a dispute or correction request is being resolved.
Right to Data Portability
Where processing is based on your consent or a contractual relationship, you may request a copy of your data in a structured, machine-readable format.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect upon receipt of your objection.
How to Exercise Your Rights: To submit a privacy rights request, please email [email protected] with the subject line "Privacy Rights Request". Include your registered username and a clear description of the right you wish to exercise. hrybaji may need to verify your identity before processing your request to ensure we do not disclose or modify data belonging to another person. We will acknowledge all requests within 5 business days and provide a full response within 30 calendar days.
Policy Updates & Contact
hrybaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The most current version of this Privacy Policy will always be available at hrybaji.net/privacy-policy. The "Last Updated" date at the top of this page will be revised whenever a substantive change is made.
Where a change to this Privacy Policy materially affects the way we process your personal data, hrybaji will make reasonable efforts to notify you in advance via the email address registered to your account. Continued use of the hrybaji platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hrybaji handles your personal data, please contact us through the following channel:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line for Privacy Queries: "Privacy Policy Enquiry"
- Response Time: hrybaji aims to respond to all privacy-related queries within 5 business days (Bangladesh Standard Time, UTC+6)
Children's Privacy: The hrybaji platform is strictly for adults aged 18 and above. hrybaji does not knowingly collect personal data from persons under the age of 18. If you believe that a minor has submitted personal data to hrybaji, please contact us immediately at [email protected] so that we can investigate and delete the relevant data without delay.
Ready to Start Playing?
Now that you understand how hrybaji protects your data, explore our full range of games and sports betting — all in a safe, secure environment built for Bangladeshi players.